CLI reference

Parameters

secpipw behaves like python -m pip for almost everything. The only command with secpipw-specific options is spip install; every option not listed here is passed through to pip.

Command shape

Terminal window

spip install [spip options] [pip install options] [requirements]
spip [any other pip command]

secpipw install options

These options are consumed by secpipw and are not forwarded to pip.

--spip-ignore-warning boolean

Continue despite warnings that would normally pause, prompt, or block the install.

Accepted values: No value. Presence enables the option.
Default: Disabled.

spip install requests --spip-ignore-warning

--spip-ignore <level> low | medium | high

Completely ignore warnings at the selected severity and below. Ignored warnings are not printed, do not prompt, and do not block installation. Checks that can only produce ignored severities are skipped.

Accepted values: low, medium, or high. Values are case-insensitive.
Default: Disabled.

spip install requests --spip-ignore LOW
spip install requests --spip-ignore=MEDIUM

--spip-debug boolean

Print additional diagnostic output from secpipw, including resolved packages and internal monitor errors. pip still receives the remaining install arguments.

Accepted values: No value. Presence enables the option.
Default: Disabled.

spip install requests --spip-debug

--spip-status boolean

Print a short status line confirming that the secpipw guard is enabled for this install command.

Accepted values: No value. Presence enables the option.
Default: Disabled.

spip install requests --spip-status

--sensitivity <level> low | medium | high

Adjust how strict the warning gate is. Both --sensitivity medium and --sensitivity=medium are supported.

Accepted values: low, medium, or high.
Default: low.

spip install requests --sensitivity medium
spip install requests --sensitivity=high

Mode	HIGH warning	MEDIUM warning	LOW warning
`low` default	Pause	Ask for y/n confirmation	Warn and continue
`medium`	Pause	Pause	Ask for y/n confirmation
`high`	Pause	Pause	Pause

In non-interactive environments, prompts cannot be answered. secpipw pauses instead and exits with a non-zero code. Use --spip-ignore-warning only when you have reviewed the warning source and accept the risk.

Pip passthrough

For commands other than install, secpipw directly runs python -m pip with the same arguments. For spip install, only the secpipw options listed above are removed; everything else is kept as pip install input.

secpipw reads some pip install options such as --target, --user, --prefix, --root, and --python to locate the directories that need .pth monitoring. They are still pip options and are forwarded into the guarded pip install path.

When the install target is local, or when pip is explicitly running offline with --no-index or --find-links, secpipw disables registry metadata requests. That means commands such as pip install . or local wheel installs do not trigger extra metadata lookups against PyPI or another package index.

This behavior does not disable local safety checks. It only skips remote metadata queries that are not meaningful for local or offline install sources.